Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          irO//yn0Rlw/xEJbegNvX0k3cKKhmvxab3VXECKsRoA=
Subject key identifier:   7D:9E:A8:BC:46:E5:1A:EA:60:C7:CD:4C:72:10:AE:33:40:DF:C4:DE
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       018F4790AD69903E0763A02163921FA6A8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          115B
Signing time:             Sun 05 May 2024 07:03:34 +0000
Manifest this update:     Sun 05 May 2024 07:03:34 +0000
Manifest next update:     Mon 06 May 2024 07:03:34 +0000
Files and hashes:         1: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: gesOoMA0g0/EcfUkOEpsjba9AdoHeCbJ/5EsRdneTRo=)
                          2: KKRdZ-0_xERDK7u-dz12NqU2c6M.roa (hash: GwxCdfXBc/T0lMrooEqMstsB6ekR5Z6DPv2WraaOI7o=)
                          3: MWcOMuwEtxO1rHyAW9AEAEE_rGs.roa (hash: X+zcH0NMtTWKex4fvkUyU5ApV38Z0IxH4a2oM1PXno4=)
                          4: Wn9XEzShKD8khs-cF-1qr_q-yho.roa (hash: AXM7KhI1ht5+rpAsAzXDKKQaYAPikg4FWf9pDCXqaR8=)
                          5: asVJqUNiaaLh1kPN5ccKX5hTZ5Y.roa (hash: bsW+aHq6JxYhHX0Ee66z/bLsbi+HleZFl92FQri8CLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:90:ad:69:90:3e:07:63:a0:21:63:92:1f:a6:a8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: May  5 07:03:34 2024 GMT
            Not After : May  6 07:03:34 2024 GMT
        Subject: CN=7d9ea8bc46e51aea60c7cd4c7210ae3340dfc4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:f4:9a:c1:32:55:7d:4e:da:f9:d2:ca:65:
                    a1:c0:18:f2:56:56:a9:3e:4d:29:74:c8:03:72:0c:
                    68:9b:74:22:0d:ff:e6:90:c3:37:31:bc:73:39:39:
                    c0:ef:3a:af:a0:0e:fd:2e:b4:a6:1c:75:c0:77:b3:
                    e3:72:73:db:e4:30:93:1d:45:44:02:ee:86:3e:16:
                    12:3d:8e:d8:38:18:c5:c3:42:d3:8f:cf:61:b8:80:
                    15:48:6d:08:aa:02:24:1a:8e:5e:52:7b:a9:fe:af:
                    0c:3b:aa:d8:94:c6:74:1e:ef:96:52:d7:ea:7f:e8:
                    93:f4:19:af:c8:ff:9b:bb:ba:80:4b:ac:82:09:c7:
                    18:64:43:db:af:c1:e3:58:41:f2:72:7a:32:89:9a:
                    ad:bf:49:2c:4d:a6:f2:7a:28:3f:d3:ed:e2:21:91:
                    4b:41:d6:1d:69:f1:a2:ca:58:86:d8:53:3c:28:86:
                    8b:1e:bf:a2:34:80:5b:0b:99:a8:af:eb:2f:85:52:
                    0d:68:b2:4a:9f:76:97:a2:87:44:c9:c5:e1:d4:df:
                    03:08:63:77:df:41:c6:45:bc:57:70:4b:4d:68:a9:
                    22:b0:d9:c2:9a:92:0a:8d:e6:87:2c:8e:64:d9:92:
                    ed:4e:87:0b:f6:bf:da:c9:86:02:0f:99:8e:d9:0c:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:A8:BC:46:E5:1A:EA:60:C7:CD:4C:72:10:AE:33:40:DF:C4:DE
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:13:fb:dd:9b:1f:ca:fd:e5:e7:c5:cd:30:9f:43:7e:56:41:
         5f:8d:8a:07:0c:b2:58:e4:c6:16:94:0c:b0:6f:43:57:d5:7e:
         b9:82:87:c7:7a:1e:fa:77:90:1b:f8:3c:cd:aa:44:5a:5e:3e:
         ad:59:b1:16:c3:85:b9:48:bd:4f:44:bd:bd:55:95:38:d6:4a:
         34:88:68:3c:64:3d:eb:8f:00:7b:73:38:5f:63:a0:b7:44:fa:
         25:17:5b:5a:7f:57:dd:e2:4f:58:d4:22:bd:e8:c1:e6:ab:84:
         83:58:98:04:e6:b2:56:8c:28:80:24:76:64:b7:0f:89:1f:9d:
         5f:0e:cc:3e:70:9f:ce:3c:dd:12:b1:a3:9a:64:7c:ca:d0:62:
         42:5c:27:0d:a0:da:97:3c:f1:42:bf:9f:b9:6a:ea:1c:bd:a3:
         c7:c8:fc:a5:ff:54:19:08:b0:b4:da:6e:2c:e5:1a:1b:79:ba:
         ae:be:4f:6f:4e:c6:cf:e2:34:97:f4:2a:42:5b:ea:43:5a:fb:
         9d:b6:7e:45:76:34:d1:12:82:00:96:e4:60:1f:de:b8:10:6e:
         42:68:72:60:65:e8:57:e0:32:86:2e:f7:5f:3a:af:c9:44:c7:
         d5:8a:ec:36:07:16:2c:26:cf:9d:87:c3:50:d7:5f:0d:cc:06:
         b7:d7:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:06:31 2024 by rpki-client on console-ams.rpki-client.org